Research · curated 5 Aug 2026
Prompt injection isn't the bug, AI agent frameworks are
First reported theregister.com
Coverage timeline
Single-source research — first reported, latest, and curated coincide.
Why it matters
Vulnerabilities in the shared orchestration layer of AI agent frameworks affect an entire category of enterprise AI apps at once, letting attacker-controlled content cross from the data plane into trusted framework logic to achieve RCE without the agent needing any dangerous tools.
Check Point researchers Yarden Porat and Shahar Tal disclosed 11 vulnerabilities across major AI agent frameworks (LangChain, LangGraph, CrewAI, AutoGen, Microsoft Agent Framework, Google ADK), arguing that the real risk is how frameworks handle prompt injection rather than injection itself. Their findings include classic flaw classes—insecure deserialization, SSRF, path traversal, use-after-free—such as a critical checkpoint deserialization bug in Microsoft Agent Framework that allowed remote code execution via poisoned agent state; Microsoft paid a $10,000 bounty and fixed it.